Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: ppyzBE9GESRIZ9BQ1ARP/RIjiqgW/gvBA5D84udbvW4=
Subject key identifier: D7:71:AA:4C:15:92:84:45:7C:4C:B5:5E:F7:85:38:05:C3:C7:21:93
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 01A170CA0AE03C21FCAD91036ADEF73633F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 11CE
Signing time: Sun 25 Oct 2026 02:00:51 +0000
Manifest this update: Sun 25 Oct 2026 02:00:51 +0000
Manifest next update: Mon 26 Oct 2026 02:00:51 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: SPbcFYezaY1i2Eb2hKwnpGdcrlw48qUkoFxrZeNboto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:ca:0a:e0:3c:21:fc:ad:91:03:6a:de:f7:36:33:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Oct 25 02:00:51 2026 GMT
Not After : Oct 26 02:00:51 2026 GMT
Subject: CN=d771aa4c159284457c4cb55ef7853805c3c72193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:ee:df:a7:9a:7e:d0:65:c7:0b:07:83:66:
72:3b:89:fc:50:99:ce:86:8e:0f:ab:80:69:99:66:
67:eb:bf:91:b3:85:4a:2b:3c:0b:72:44:13:80:39:
b4:75:f0:23:f0:ea:d3:83:52:13:ac:a3:be:15:e0:
a4:72:00:a6:60:27:18:97:a4:a2:e1:1f:4b:20:24:
37:64:1b:98:c3:a3:dc:21:fd:c5:e6:fa:1d:c6:1a:
e4:2d:f3:06:92:35:90:70:af:e8:9b:c6:22:62:b0:
eb:bb:18:5e:ff:f1:fd:28:e3:25:12:52:58:f5:82:
5a:1e:8e:ce:d2:96:ac:c5:1b:ea:97:c7:8b:71:ff:
d9:a4:bc:f2:e8:0f:91:0b:71:5f:e3:25:ce:e2:b7:
b5:45:4c:b8:1b:1a:de:8e:71:d7:f3:80:6f:0c:38:
6a:e8:ca:19:10:ff:18:74:c6:a9:f3:86:f6:58:ed:
5c:2d:f7:70:da:ff:e3:44:61:76:ac:22:b9:64:f8:
7d:69:08:e4:9d:2b:fc:4a:60:cb:5c:2e:ca:b5:1b:
02:30:64:bf:db:97:42:78:5c:dc:8b:1d:82:83:06:
b9:d9:c6:6e:c2:16:0d:08:88:9a:a3:31:28:c1:e2:
23:1f:4f:20:7c:7e:43:68:90:86:88:23:48:91:ca:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:71:AA:4C:15:92:84:45:7C:4C:B5:5E:F7:85:38:05:C3:C7:21:93
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:a9:a4:5c:a0:e6:11:a6:c2:05:13:fa:ff:60:c1:93:6c:
89:59:ee:ae:8a:4d:45:e8:b3:9b:1e:2e:7f:00:13:2b:b0:54:
49:1e:75:cd:3d:4b:ad:b0:b3:f2:10:c1:db:28:ef:ab:f8:73:
ad:e3:e4:f2:1c:70:37:fd:c9:89:a9:c7:bc:4e:57:5f:95:be:
d3:42:1b:92:45:a7:3d:fd:f8:93:74:74:a5:2c:70:e8:74:a0:
b1:e7:7d:f7:ba:69:0f:9d:c5:d2:a1:f5:d7:87:d4:9c:b7:b7:
79:73:23:d2:b7:42:8a:ef:36:5b:14:ae:6c:f8:2e:2b:7a:97:
f4:47:6e:52:df:3a:56:7c:13:ac:03:e7:87:b1:d2:60:8b:ba:
7b:81:bf:d7:18:d7:d7:68:65:6b:b2:78:83:11:7f:07:c1:69:
51:b5:da:62:68:33:05:8d:5e:44:af:92:c5:a8:9f:aa:38:f0:
f3:29:97:aa:fd:c6:79:59:db:d0:ca:65:48:2e:82:17:c6:b8:
7f:91:9b:9e:b9:63:b5:da:3e:a2:81:3d:13:8d:23:0e:ed:16:
9a:c9:88:21:31:ac:d0:2e:d9:e2:6a:a7:71:21:8f:d3:ed:11:
40:a9:31:69:2d:06:6c:5f:75:40:e3:5e:31:c3:ef:1f:3c:00:
25:85:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 12:43:42 2026 by rpki-client